Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/eaf64540-d802-3e1b-adfe-c5e72f37f729.roa
File:                     eaf64540-d802-3e1b-adfe-c5e72f37f729.roa (raw, json)
Hash identifier:          +qPbBQ+alIH2ez0sYFBurPa0X1mrfXxP2mgAHfcM8bA=
Subject key identifier:   88:EF:CC:28:5F:12:12:84:67:2D:42:29:3B:17:10:6E:69:74:51:38
Certificate issuer:       /CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
Certificate serial:       010D0C9F4328584CAA270FFC8F929F7A8AA3FE80
Authority key identifier: C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/eaf64540-d802-3e1b-adfe-c5e72f37f729.roa
Signing time:             Tue 27 Jan 2026 14:00:36 +0000
ROA not before:           Tue 27 Jan 2026 14:00:36 +0000
ROA not after:            Mon 27 Apr 2026 13:00:36 +0000
asID:                     53828
IP address blocks:        2605:a380::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:aa:27:0f:fc:8f:92:9f:7a:8a:a3:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
        Validity
            Not Before: Jan 27 14:00:36 2026 GMT
            Not After : Apr 27 13:00:36 2026 GMT
        Subject: CN=df61d82e-e0b9-43a1-9d4a-6191cf7b2563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9b:8a:c6:a1:27:67:0c:fa:b7:9f:05:af:a3:
                    c6:20:a9:0b:18:9c:52:3b:02:c7:e8:2d:b7:00:a5:
                    9b:77:f5:2f:3d:f0:66:fa:58:96:b0:c3:d1:12:39:
                    66:50:99:af:3e:c8:d3:c6:e0:e3:52:02:5b:a7:c3:
                    c8:02:d6:07:bc:6d:49:47:fa:f5:6a:52:b7:80:d1:
                    c3:9c:16:de:aa:9f:95:bd:76:3c:0f:a5:ba:d4:4d:
                    96:b4:e7:f1:d0:f1:a5:ab:f3:39:46:9d:ab:38:66:
                    ef:3f:92:9e:4a:af:cc:59:39:2c:55:11:d0:12:db:
                    c1:69:4d:9b:f9:98:8e:23:2c:0d:96:9f:18:8c:f7:
                    83:b5:16:0f:df:f1:e3:e0:31:68:9b:13:68:00:a5:
                    d8:34:f1:3f:6a:c6:9c:f8:2f:81:20:8b:fe:87:aa:
                    e3:8d:c5:90:5b:01:be:e8:9f:8e:da:d3:52:1f:de:
                    ed:fc:27:5b:b0:78:99:b0:be:dd:8f:18:e3:55:74:
                    62:7f:dc:2f:b2:51:ee:e1:40:90:7b:b9:93:b8:a4:
                    f0:b9:14:0a:7b:e1:21:e4:81:38:77:9a:15:0c:0f:
                    16:91:e5:d9:f2:6a:ca:7b:ce:7f:66:d8:10:eb:b3:
                    0c:f4:2b:51:fd:b6:bb:b7:07:0f:3f:f0:cd:79:8b:
                    b5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:EF:CC:28:5F:12:12:84:67:2D:42:29:3B:17:10:6E:69:74:51:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/eaf64540-d802-3e1b-adfe-c5e72f37f729.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl

            X509v3 Authority Key Identifier:
                keyid:C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a380::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:44:49:e3:ce:0c:e7:49:54:dc:e8:39:5a:ed:7c:85:d6:a7:
         84:b2:0a:5a:ea:ab:1a:96:e4:a3:95:20:2f:cb:bf:a3:d1:be:
         54:ab:27:cb:5e:fc:77:6a:05:a7:34:87:22:8a:fa:dd:f6:44:
         75:48:7b:15:e3:dc:ec:0f:14:e2:e3:cf:c3:b9:5c:ce:7e:fc:
         23:1a:16:2f:b7:a9:c0:ba:0f:20:61:3c:e5:66:25:64:56:99:
         43:d2:f2:fa:b9:c8:15:61:e6:9e:64:cc:22:25:74:56:4d:d1:
         9b:d8:c8:69:c1:20:fd:44:6a:b2:7c:15:81:c7:4d:a5:25:39:
         1a:44:71:d1:bc:23:ad:21:cf:e4:b0:db:0c:32:b4:e3:7e:11:
         16:fb:63:e4:ad:47:72:ec:00:77:6e:c0:bf:16:3e:0a:16:47:
         5d:12:97:ae:08:11:3a:e0:25:44:a6:0c:96:ef:fc:ae:7f:94:
         c2:a4:7b:c8:2f:e0:d7:24:fe:7a:6e:08:d4:3f:e9:bd:1b:92:
         eb:dd:3d:3e:36:b1:80:06:33:19:42:8e:7e:ba:8c:7e:13:63:
         b2:de:0b:e1:98:39:b4:25:c3:e3:8a:78:93:8b:a9:25:a1:e7:
         dd:e4:7f:9a:b6:77:e5:b8:9b:36:15:93:fe:9b:d7:b2:b5:46:
         bf:80:5c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 18:28:47 2026 by rpki-client